Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/KCCdyAjtsI_Lem0PgBaoDgKXMjc.roa
File: KCCdyAjtsI_Lem0PgBaoDgKXMjc.roa (raw, json)
Hash identifier: ICZDnVyVb+iAqkLlHw0C61nlL4WoQKV9oOcltsdOGzQ=
Subject key identifier: 28:20:9D:C8:08:ED:B0:8F:CB:7A:6D:0F:80:16:A8:0E:02:97:32:37
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194244497DA026D20DE9B775E6C98A0CB30
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/KCCdyAjtsI_Lem0PgBaoDgKXMjc.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139659
IP address blocks: 45.11.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:97:da:02:6d:20:de:9b:77:5e:6c:98:a0:cb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28209dc808edb08fcb7a6d0f8016a80e02973237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:9c:6c:49:d0:37:1c:8d:48:ce:c3:bd:e7:
6b:12:4d:06:67:31:0a:6f:98:4e:3b:93:e7:65:17:
4e:39:00:19:da:66:c6:61:e2:1a:3a:68:85:b2:c9:
ab:f7:20:8c:fc:9a:48:79:ee:1e:63:81:3a:58:a8:
e1:16:24:bb:60:5d:d9:97:65:97:7b:1b:a3:fc:d7:
a0:76:22:db:76:36:ec:0b:30:07:63:13:7a:a9:8d:
be:c8:95:f8:c7:00:8d:81:36:c0:60:40:ae:d1:b7:
90:ee:bd:79:78:56:88:fd:16:e1:21:74:3a:c3:c9:
b1:ce:6e:ce:e4:58:da:0f:72:76:e8:df:d5:b0:62:
a7:01:50:d2:93:fc:19:04:da:31:d0:68:82:af:d8:
95:38:22:9b:0c:29:2d:0b:70:92:2e:0c:3d:ca:d8:
0f:76:f3:10:7b:9c:ee:51:3a:ed:fa:46:c1:02:ee:
bc:4c:4c:9a:f4:75:21:a4:87:96:c9:db:23:60:95:
49:0c:8c:87:7d:a5:ca:a2:3d:95:67:6c:65:9e:2f:
49:ae:69:9e:c2:a0:c9:90:4f:4d:f0:0c:39:46:9a:
6c:c0:aa:b5:39:30:1d:d3:0e:7e:aa:30:f4:41:2a:
9d:64:ba:4c:35:10:80:d3:bc:15:ff:4f:e0:04:2f:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:9D:C8:08:ED:B0:8F:CB:7A:6D:0F:80:16:A8:0E:02:97:32:37
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/KCCdyAjtsI_Lem0PgBaoDgKXMjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:40:9e:4f:04:aa:a1:de:23:f1:e5:0f:12:58:aa:4a:59:74:
ea:d6:ca:cd:2d:7c:b6:f5:dc:6b:5e:f0:d1:fa:f1:4c:ab:ba:
3c:4f:e5:ca:fb:23:5f:86:cf:89:f4:19:12:ef:7f:5a:d5:a7:
cb:7a:7b:17:57:cb:5b:c8:b3:06:d6:b7:e5:eb:18:28:62:39:
c5:37:64:1c:28:01:b8:6b:18:80:41:de:03:17:b1:b8:5b:f1:
fb:58:12:09:08:5c:d7:6e:bc:39:37:5f:5e:23:de:bb:b1:99:
40:17:2e:83:c5:37:04:15:f3:78:ba:54:e0:3a:19:d4:49:9e:
c1:f2:a1:b4:1a:70:e5:21:8e:02:03:da:f8:98:e4:86:af:48:
af:9b:1f:eb:7d:a3:81:52:55:17:25:c9:a3:ac:c6:d7:b2:b2:
90:b8:4d:74:50:5d:0d:3d:5a:45:48:fe:4b:3d:4e:56:e9:2a:
2e:97:b5:6f:24:07:58:e6:2f:b6:c9:7e:5e:7f:52:5f:93:d8:
0d:ea:9e:7c:ab:d2:fd:54:d6:a4:10:ff:e9:cc:36:55:42:60:
3d:1a:3e:6b:c7:4d:b6:d5:27:3a:c3:15:46:b1:f6:fc:82:af:
ad:88:8b:95:22:b2:37:91:7b:45:85:92:7b:5e:ae:fb:e8:7d:
ec:f4:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:57 2025 by rpki-client